Google recorded new attacks on accounts: how to protect your data.

Google confirmed the presence of a new wave of attacks on user accounts. Almost 40% of successful breaches are attributed to phishing, and the threat of info stealers raises questions about data access security.

This is reported by Forbes.

What is known about attacks on Google accounts

Hacking Google credentials grants attackers access not only to Gmail but also to all company services and third-party applications that you log into through Google. Old poorly written phishing emails have given way to well-crafted lures generated by AI, and fake login pages are now almost indistinguishable from the real ones.

Attackers also intercept alerts about suspicious logins and emails from 'no-reply' addresses, and they disguise themselves as legitimate infrastructure - for example, using Google Forms, Sites, or even Translate. If a tool is publicly available, someone will try to exploit it.

There's also a new trick involving 'voicemail': users receive messages with a 'Listen to Voicemail' button. A recorded case showed that the link initially leads to a page on the legitimate Microsoft Dynamics domain (which adds credibility), and after solving a captcha, it redirects to a cloned Gmail login page hosted on a malicious domain, rather than on accounts.google.com. Visually, such a forgery is 'pixel for pixel'.

Experts advise never to log into accounts through links in emails, messages, or notifications - use familiar methods: official applications or manually open the website. Additionally, it's worth enabling two-factor authentication that is not dependent on SMS and adding a passkey. According to Google, passkeys are unique digital keys tied to your device, unlike passwords, they cannot be guessed, stolen, or forgotten.

Recall that every day unknown numbers call on smartphone screens, and answering them can be risky. Among them are both legitimate service calls and fraudulent attempts, so it is important to know the signs when it's better not to pick up the phone.

We have also reported that users receive dozens of messages daily, and some of them conceal danger. Some SMS or chats may lead to loss of money or leakage of personal data, experts warn.

Conclusion

Google confirmed the rise in attacks on user accounts, particularly through phishing and info stealers. Attackers are becoming increasingly inventive in their methods, so it is important to adhere to the security measures recommended by the company to protect your data from unauthorized access.